CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

UBUNTU-CVE-2020-15680

If a valid external protocol handler was referenced in an image tag, the resulting broken image size could be distinguished from a broken image size of a non-existent protocol handler. This allowed an attacker to successfully probe whether an external protocol handler was registered. This...

CVE-2013-3944

Stack-based buffer overflow in the MrSID plugin MrSID.dll before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag...

Stack overflow

Stack-based buffer overflow in the MrSID plugin MrSID.dll before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag...

CVE-2013-3944

Stack-based buffer overflow in the MrSID plugin MrSID.dll before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag...

CVE-2013-3944

CVE-2013-3944 affects the IrfanView MrSID plugin (MrSID.dll) prior to version 4.37. The vulnerability is a stack-based buffer overflow in the handling of the IMAGE tag, which can allow an attacker to execute arbitrary code on a vulnerable host. This CVE is referenced in related advisories indicat...

Cross site scripting

The sanitizestring function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which allows remote attackers to perform a cross-site scripting XSS attack by wrapping a payload in "scriptpayload", or in an image tag, with the payload as the onerror event...

CVE-2019-9842

madskristensen MiniBlog through 2018-05-18 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in appcode/handlers/PostHandler.cs writes a decoded base64 string to a file without validating the extension...

CVE-2019-12616

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken tag pointing at the victim's phpMyAdmin database, and the attacker can potential...

UBUNTU-CVE-2019-12616

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken tag pointing at the victim's phpMyAdmin database, and the attacker can potential...

Cross site request forgery (csrf)

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken tag pointing at the victim's phpMyAdmin database, and the attacker can potential...

DEBIAN-CVE-2019-12616

An issue was discovered in phpMyAdmin before 4.9.0. A vulnerability was found that allows an attacker to trigger a CSRF attack against a phpMyAdmin user. The attacker can trick the user, for instance through a broken tag pointing at the victim's phpMyAdmin database, and the attacker can potential...

CVE-2018-20778

admin/?/plugin/filemanager in Frog CMS 0.9.5 allows XSS by creating a new file containing a crafted attribute of an IMG element...

GHSA-VJCJ-5G2R-VXQC Pandao editor.md vulnerable to XSS in IMG attributes

Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element...

XSS Vulnerability in ThinkLC Multiple Pages

ThinkLC is a classified information system developed by SaxueCMS. ThinkLC V4.0 and previous versions of multi-page XSS vulnerability, the vulnerability stems from the system fails to adequately filter img tags, an attacker can construct malicious img tags to exploit the vulnerability to obtain...

ShowDoc v1.8.0 suffers from stored xss vulnerability

ShowDoc is an online document sharing tool that speeds up communication between teams. A stored xss vulnerability exists in ShowDoc v1.8.0 and below, which stems from a failure to filter harmful tags and allows an attacker to obtain a user cookie via an img tag...

GHSA-P6H9-GW49-RQM4 markdown2 is vulnerable to cross-site scripting

An issue was discovered in markdown2 aka python-markdown2 through 2.3.5. The safemode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final character from...

Code injection

SVG loaded through "" tags can use "" tags within the SVG data to set cookies for that page. This vulnerability affects Firefox 57...

GitLab: HTML TAG INJECTION ON PROFILE NAME

Allows me to change the profile name to an image tag and convert it into an html code and this tag appears perfectly on the "snippets" page. Suppose I include an image tag with source and when another user sees it on the "https://gitlab.com/snippets/1718284" page it will appear an image of an...